This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/4xfelhMyKjiAcpwxhZeIvv3Qing.roa File: 4xfelhMyKjiAcpwxhZeIvv3Qing.roa (raw, json) Hash identifier: M45T3Ux9RH0dWd2jQVba7oO9zhwgfDQ6pVLKhbaYTkM= Subject key identifier: E3:17:DE:96:13:32:2A:38:80:72:9C:31:85:97:88:BE:FD:D0:8A:78 Certificate issuer: /CN=c6a707934a762bbdf34fc0148f265ce124577213 Certificate serial: 019B7C803A34DB85F1008136204CA64116F6 Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/4xfelhMyKjiAcpwxhZeIvv3Qing.roa Signing time: Fri 02 Jan 2026 02:18:56 +0000 ROA not before: Fri 02 Jan 2026 02:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215826 IP address blocks: 5.252.153.0/24 maxlen: 24 5.252.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:3a:34:db:85:f1:00:81:36:20:4c:a6:41:16:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213 Validity Not Before: Jan 2 02:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e317de9613322a3880729c31859788befdd08a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7d:94:3e:ce:b8:73:e4:64:d8:ea:fb:7b:7e: 9a:69:2d:a2:cd:d7:d6:55:f5:91:19:e4:c3:ce:ac: 6f:45:62:43:cd:07:26:d6:e4:68:02:93:2a:3d:9c: 7f:18:b3:fb:c4:b5:3d:2e:e7:cb:87:d4:e9:e7:a2: 29:11:84:3f:e8:8a:7d:e7:e6:71:97:25:94:8f:38: 8a:b0:85:94:dd:3d:59:3f:12:58:ab:11:a9:fc:71: 3d:8c:9a:61:76:12:4d:98:f1:b6:0e:1f:bd:c5:1c: 22:1f:41:f0:c4:4c:e0:5e:69:7e:0f:f1:2a:a9:cc: 3b:38:22:7a:43:3e:37:85:a5:0a:56:69:cb:04:37: 08:d4:46:4a:b2:6e:69:f4:9a:c7:23:3a:8f:b3:fa: 6e:2c:d5:5b:a4:8b:46:b8:39:49:2f:24:a2:55:1b: 94:7f:f2:d3:2a:22:5e:27:78:a3:83:c8:33:c2:65: 7c:85:75:de:c5:0e:55:76:ae:09:b9:6b:51:a6:29: ac:1a:14:89:4c:b0:81:52:ec:83:05:40:3a:9c:3b: ad:e0:d7:57:1b:2b:12:b8:f2:25:0c:f2:14:2b:7a: c0:29:d0:01:93:54:2f:22:7a:2f:19:b4:f9:24:43: 18:5c:7c:d9:d4:11:41:1f:3c:bc:da:3b:1b:42:2b: a9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:17:DE:96:13:32:2A:38:80:72:9C:31:85:97:88:BE:FD:D0:8A:78 X509v3 Authority Key Identifier: keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/4xfelhMyKjiAcpwxhZeIvv3Qing.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.153.0/24 5.252.155.0/24 Signature Algorithm: sha256WithRSAEncryption a7:0e:3f:91:ff:bc:f9:ea:70:0f:ac:6f:b9:4a:3c:ea:22:47: 63:f9:f1:56:7b:c1:f6:6c:42:ff:94:12:34:73:7f:fc:31:3b: 98:87:a9:79:c9:70:01:2c:3f:90:59:44:8c:4c:31:e8:74:c3: d6:d4:1d:cd:d7:a6:4d:1f:4f:e2:b3:d1:23:a2:6f:38:0e:d4: b2:ad:37:bb:d7:b3:0d:0a:ce:ef:24:22:b1:a3:a2:47:68:eb: e4:4e:77:21:cb:1a:6a:d6:17:a6:88:ec:b3:d3:e1:6d:eb:b6: bf:92:39:11:9b:23:34:af:a6:4a:e8:51:6f:56:59:f4:16:ae: 7d:9b:10:26:d4:c4:3d:0f:5f:95:67:62:fa:97:ea:e7:40:3e: 49:22:16:b9:42:ad:dc:53:3a:75:f2:9f:25:3b:7e:02:ab:9c: 70:f6:3d:44:29:78:22:2d:bf:67:38:43:c2:99:34:df:ce:0e: 2c:23:f1:ec:82:d9:3d:35:48:8d:93:04:5b:28:01:b7:69:3d: 82:26:38:9e:00:8f:03:e3:0e:8f:62:d5:45:20:6a:31:5a:03: ba:a9:1a:20:15:1e:bd:4b:18:e4:f5:f6:52:96:34:85:2f:eb: 85:4c:c6:77:4d:d8:27:72:db:4d:43:18:c9:38:40:a8:a9:60: 07:5a:4e:8b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gDo024XxAIE2IEymQRb2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTcwNzkzNGE3NjJiYmRmMzRmYzAxNDhmMjY1Y2UxMjQ1 NzcyMTMwHhcNMjYwMTAyMDIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzE3ZGU5NjEzMzIyYTM4ODA3MjljMzE4NTk3ODhiZWZkZDA4YTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn2UPs64c+Rk2Or7e36aaS2izdfW VfWRGeTDzqxvRWJDzQcm1uRoApMqPZx/GLP7xLU9LufLh9Tp56IpEYQ/6Ip95+Zx lyWUjziKsIWU3T1ZPxJYqxGp/HE9jJphdhJNmPG2Dh+9xRwiH0HwxEzgXml+D/Eq qcw7OCJ6Qz43haUKVmnLBDcI1EZKsm5p9JrHIzqPs/puLNVbpItGuDlJLySiVRuU f/LTKiJeJ3ijg8gzwmV8hXXexQ5Vdq4JuWtRpimsGhSJTLCBUuyDBUA6nDut4NdX GysSuPIlDPIUK3rAKdABk1QvInovGbT5JEMYXHzZ1BFBHzy82jsbQiup0QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOMX3pYTMio4gHKcMYWXiL790Ip4MB8GA1UdIwQY MBaAFManB5NKdiu980/AFI8mXOEkV3ITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80ODZjOTYtOGUwZi00MTYxLWEwMGUt YjhlYTE4ZWI3NWY0LzEvNHhmZWxoTXlLamlBY3B3eGhaZUl2djNRaW5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi80ODZjOTYtOGUwZi00MTYxLWEwMGUtYjhlYTE4ZWI3NWY0 LzEveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABfyZAwQA BfybMA0GCSqGSIb3DQEBCwUAA4IBAQCnDj+R/7z56nAPrG+5SjzqIkdj+fFWe8H2 bEL/lBI0c3/8MTuYh6l5yXABLD+QWUSMTDHodMPW1B3N16ZNH0/is9Ejom84DtSy rTe717MNCs7vJCKxo6JHaOvkTnchyxpq1hemiOyz0+Ft67a/kjkRmyM0r6ZK6FFv Vln0Fq59mxAm1MQ9D1+VZ2L6l+rnQD5JIha5Qq3cUzp18p8lO34Cq5xw9j1EKXgi Lb9nOEPCmTTfzg4sI/Hsgtk9NUiNkwRbKAG3aT2CJjieAI8D4w6PYtVFIGoxWgO6 qRogFR69Sxjk9fZSljSFL+uFTMZ3TdgncttNQxjJOECoqWAHWk6L -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:32 2026 by rpki-client